Privacy Policy

This Privacy Policy explains how [LEGAL_ENTITY_NAME], operating as Verika Due Diligence Group ("Verika," "we," "us," or "our"), collects, uses, shares, and protects personal data in connection with our website (verika.org), the Verika Client Portal, and our due diligence engagements.

This Policy is separate from, and does not limit, any confidentiality obligations Verika owes under a signed NDA or Engagement Letter, which also govern how engagement data is handled.

1. Personal Data We Collect

What we collect depends on how you interact with us:

Website visitors

Name, firm, email address, and any message content you submit through our contact form, plus standard technical data (IP address, browser type, pages visited).

Client Portal users (fund personnel)

Name, email address, role or title, and your activity within the Portal, including messages you send to your engagement team.

Individuals involved in a diligence engagement

Where Verika is engaged to review a company, we may process personal data about that company's founders, executives, employees, and references — such as contact details, background and reference-check information, and notes or recordings from interview calls — as well as personal data that appears within financial and corporate documents supplied as part of the engagement (for example, in a cap table or payroll record).

Verika staff

Name, email address, role, and account activity, for staff granted access to the admin platform.

2. Call Recording

Interview and reference calls conducted as part of an engagement may be recorded for accuracy and quality purposes. Participants are notified before recording begins, and recording proceeds only with the participant's acknowledgment. Recordings and any transcript are treated as confidential engagement material and are subject to the access controls described in our Data Protection page.

3. How We Use Personal Data

• To perform due diligence engagements under contract with a client fund, including conducting interviews, reviewing documents, and preparing findings.
• To operate, secure, and improve the website and Client Portal.
• To communicate with you about an engagement, an account, or a message you've sent us.
• To meet our own legal, regulatory, and recordkeeping obligations.

Where required by applicable law, our legal bases for this processing include performance of a contract, our legitimate business interests in operating an independent diligence practice, consent (for example, before recording a call), and compliance with legal obligations.

4. Who We Share Data With

We share engagement-related personal data with:

• The client fund that engaged us — sharing our findings with the engaging fund is the core purpose of the service.
• Verika staff assigned to the relevant engagement — access is role-based; staff not assigned to an engagement do not see its data.
• Service providers who process data on our behalf (our subprocessors) — listed in full on our Data Protection page.

We do not sell personal data, and we do not share it with third parties for their own marketing purposes.

5. International Data Transfers

Our service providers may process data in the United States or other countries outside the jurisdiction where you or the company under review are located. Where required by [APPLICABLE_DATA_PROTECTION_LAW], we use appropriate safeguards for these transfers.

6. Data Retention

We retain engagement data for the duration of the engagement and for [RETENTION_PERIOD] afterward, to meet professional recordkeeping obligations and to respond to any follow-up questions from the client fund, after which it is deleted or anonymized. Client Portal account data is retained while the account remains active.

7. Your Rights

Subject to the law that applies in your jurisdiction, you may have the right to request access to, correction of, or deletion of your personal data, to object to or restrict certain processing, and to receive a copy of your data in a portable format. To exercise any of these rights, contact privacy@verika.org. If you are not satisfied with our response, you may have the right to lodge a complaint with [SUPERVISORY_AUTHORITY].

8. Data Security

We use role-based access controls so that a client fund can only see data relating to its own engagements, encrypt data in transit, and require NDA execution before any data room access begins. Full detail is on our Data Protection page.

9. Cookies

Our website uses only the cookies necessary for it to function. We do not currently use advertising or third-party tracking cookies.

10. Children's Privacy

Our Services are directed at businesses and professionals. We do not knowingly collect personal data from anyone under the age of 18.

11. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by an updated "Last updated" date above.

12. Contact

Questions about this Policy, or requests relating to your personal data, can be sent to privacy@verika.org.